WHAT IS CLAIMED: 

1 . A method for automatically generating a list of participants physically present at a 
meeting, and distributing permission to at least one of the participants, comprising the steps of: 

(A) during the meeting, collecting identity and key information from at least 
one of the participants using at least one first personal area network; 

(B) storing the identity and key information in one or more 
collection/distribution devices; and 

(C) after step (B), distributing permission to access a service to said at least 
one of the participants over at least one second personal area network using the one or more 
collection/distribution devices wherein the permission is represented using a digital signature. 

2. The method of claim 1 wherein the first personal area network and the second 
personal area network are the same. 

3 . The method of claim 1 wherein the first personal area network and the second 
personal area network are different. 

4. The method of claim 1 wherein the one or more collection/distribution devices 

comprise a personal digital assistant. 

5 . The method of claim 1 wherein said permission comprises authority to delegate 
one or more further permissions to one or more subsequent delegatees. 

6. The method of claim 1 wherein said first personal area network comprises two or 
more devices that transmit data by infrared light waves. 

7. The method of claim 1 wherein said first personal area network comprises two or 
more devices that transmit data by digital short-range radio waves. 
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8. The method of claim 1 wherein said second personal area network comprises two 
or more devices that transmit data by infrared hght waves. 

9. The method of claim 1 wherein said second personal area network comprises two 
or more devices that transmit data by digital short-range radio waves. 

10. The method of claim 1 wherein said service comprises accessing content. 

1 1 . The method of claim 1 wherein said service comprises actuating a device. 

12. A graphical user interface on a delegation device comprising: 

an access control matrix wherein said access control matrix comprises 

one or more subject display areas for displaying subject information regarding 
one or more subjects physically present at a meeting and from whom identity and key 
information has been collected using at least one first personal area network, which identity and 
key information is stored on the delegation device; 

one or more object display areas for displaying object information relating to one 
or more permissions to access a service wherein said permissions are distributed to said one or 
more subjects over at least one second personal area network using the delegation device and 
wherein the permissions are represented using a digital signature; 

one or more association display areas for displaying association information of 
said one or more subjects to said one or more objects. 

13. The graphical user interface of claim 12 wherein said first personal area network 
and said second personal area network are the same. 

14. The graphical user interface of claim 12 wherein said first personal area network 
and said second personal area network are different. 
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15. The graphical user interface of claim 12 wherein said one or more association 
display areas comprises one or more access control display areas. 

16. The graphical user interface of claim 12 wherein said one or more association 
display areas comprises one or more capabilities display areas. 

17. The graphical user interface of claim 12 wherein said delegation device comprises 
a personal digital assistant. 

1 8. The graphical user interface of claim 12 wherein said service comprises accessing 

content. 

19. The graphical user interface of claim 12 wherein said service comprises actuating 
a device. 

20. A graphical user interface on a delegation device comprising: 

one or more movable subject icons representing one or more subjects physically 
present at a meeting and from whom identity and key information has been collected using at 
least one first personal area network, which identity and key information is stored on the 
delegation device; and 

one or more movable object icons relating to one or more permissions to access a 
service wherein said permissions are distributed to said one or more subjects over at least one 
second personal area network using the delegation device and wherein said permissions are 
represented using a digital signature; 

wherein said subject icons are associated with said object icons by physically 
associating said subject icons with said object icons. 

21 . The graphical user interface of claim 20 wherein said first personal area network 
and said second personal area network are the same. 
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22. The graphical user interface of claim 20 wherein said first personal area network 
and said second personal area network are different. 

23 . The graphical user interface of claim 20 wherein the service comprises accessing 

content. 

24. The graphical user interface of claim 20 wherein the service comprises actuating a 

device. 

25 . A system for automatically generating a list of participants physically present at a 
meeting, and distributing permission to at least one of the participants, comprising: 

one or more collection/distribution devices that, during the meeting, collect 
identity and key information tirom at least one of the participants using at least one first personal 
area network; store the identity and key information; and distribute permission to access a 
service to at least one of the participants over at least one second personal area network, wherein 
the permission is represented using a digital signature. 

26. The system of claim 25 wherein said first personal area network and said second 
personal area network are the same. 

27 . The system of claim 25 wherein said first personal area network and said second 

personal area network are different. 

28 . The system of claim 25 wherein the one or more collection/ distribution devices 
comprise a personal digital assistant. 

29. The system of claim 25 wherein said permission comprises the authority to 
delegate one or more further permissions to subsequent delegatees. 

30. The system of claim 25 wherein said first personal area network comprises two or 
more devices that transmit data by infrared Ught waves. 
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31. The system of claim 25 wherein said first personal area network comprises two or 
more devices that transmit data by digital short-range radio waves. 

32. The system of claim 25 wherein said second personal area network comprises two 
or more devices that transmit data by infi*ared Ught waves. 

33 . The system of claim 25 wherein said second personal area network comprises two 
or more devices that transmit data by digital short-range radio waves. 

34. The system of claim 25 wherein the service comprises accessing content. 

35. The system of claim 25 wherein the service comprises actuating a device. 
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